CVE-2016-5316: Medium severity LibTIFF libtiff vulnerability
Out-of-bounds read in the PixarLogCleanup function in tifpixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5316?
CVE-2016-5316 is classified as a high severity vulnerability due to its ability to crash applications when exploited.
How do I fix CVE-2016-5316?
To mitigate CVE-2016-5316, upgrade to libtiff version 4.1.0 or later, as well as ensure your tiff package is updated to the corrected versions.
Which software versions are affected by CVE-2016-5316?
CVE-2016-5316 affects libtiff versions up to and including 4.0.6, as well as specific tiff package versions in various Debian and openSUSE distributions.
Can CVE-2016-5316 be exploited remotely?
Yes, CVE-2016-5316 can be exploited remotely by sending a crafted TIFF image.
What tools are impacted by CVE-2016-5316?
The rgb2ycbcr tool is specifically impacted by CVE-2016-5316, which can lead to application crashes.